li-sskins[.]com

This domain, li-sskins.com, is identified as a counterfeit Steam skin trading platform designed to harvest user credentials and payment details. Victims are lured with promises of free or discounted in-game skins, only to have their Steam accounts compromised and linked payment methods drained. The site mimics legitimate skin trading services, employing social engineering tactics to exploit users seeking virtual goods. Analysis indicates the domain was registered on February 10, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. The site resolves to IP address 58.64.137.69, hosted on AS17444 (HKBN Enterprise Solutions Limited) in Hong Kong. At the time of assessment, VirusTotal reported 10 out of 95 security vendors flagging the domain as malicious, with detection labels including phishing and fraudulent activity. The domain appears on one security blocklist and lacks SSL encryption, further increasing its risk profile. Users who visited li-sskins.com should immediately change their Steam account password and enable two-factor authentication. All linked payment methods should be reviewed for unauthorized transactions, and any credentials entered on the site should be considered compromised. Security software should be used to scan the device for malware, as phishing sites often deploy additional payloads. If financial information was submitted, affected users are advised to contact their bank or payment provider to report potential fraud and request transaction monitoring.